Alternate threat model implementation

2026-04-21 23:14:03 +02:00 · 2023-10-24 13:12:37 -04:00
parent 76a9b71231
commit 5fd56ce866
3 changed files with 34 additions and 12 deletions
--- a/java/ql/lib/semmle/code/java/dataflow/FlowSources.qll
+++ b/java/ql/lib/semmle/code/java/dataflow/FlowSources.qll
@@ -47,10 +47,6 @@ abstract class SourceNode extends DataFlow::Node {
 */
 class ThreatModelFlowSource extends DataFlow::Node {
  ThreatModelFlowSource() {
-    // Expansive threat model.
-    currentThreatModel("all") and
-    (this instanceof SourceNode or sourceNode(this, _))
-    or
    exists(string kind |
      // Specific threat model.
      currentThreatModel(kind) and